Comments:EventID.Net
See the link to "Symantec Knowlegde Base Document ID: 2000012805390254" for information about this event.
x
4

EventID.Net
Exchange does not do that by default. It is possible that an administrator configured an automatic directory export using the scheduler (at command) and admin.exe (the Exchange Administrator program).
x
3